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Proposed 

David F. Ferraiolo, Ravi Sandhu, Serban Gavrila, D. Richard Kuhn, Ramaswamy Chandramouli 
August 2001 ACM Transactions on Information and System Security (TISSEC), volume 4 issue : 

Publisher: ACM Press 

Full text available: ^.pdf(41 ZJ.Q.KB1 Additional Information: Mlcjtation, abstract, references, citings, jMex.term 

In this article we propose a standard for role-based access control (RBAC). Although RBAC mod 
have received broad support as a generalized approach to access control, and are well recogniz< 
their many advantages in performing large-scale authorization management, no single authoritc 
definition of RBAC exists today. This lack of a widely accepted model results in uncertainty and 
confusion about RBAC's utility and meaning. The standard proposed here seeks to resolve this s 
by u ... 



Keywords: Role-based access control, access control, authorization management, security, sta 



2 .Content-depend 

j&i Jonathan D. Moffett, Morris S. Sloman 

^ April 1991 ACM SIGOPS Operating Systems Review, Volume 25 issue 2 
Publisher: ACM Press 

Full text available: ^|pdf(50S.Q6 KB) Additional Information: Ml .citation, abstract, index Jerms 

Content-dependent access control, where the access decisions depend upon the value of an attr 
of the object itself, is required in many applications. However problems arise in an object-based 
environment, because obtaining the value of an object's attribute requires an operation upon th 
object. We discuss the conceptual and performance implications of introducing content-depende 
access control, and suggest how the problems can be avoided in some cases by using a domain 
approach to ... 
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New applications such as CAD, AI, and hypermedia require direct representation and flexible us< 
complex objects, behavioral knowledge, and multimedia data. To this end, we have devised a 
knowledge base management system called Jasmine. An object-oriented approach in a prograrr 
language also seems promising for use in Jasmine. Jasmine extends the current object-oriented 
approach and provides the following features. Our object model is based on functional data moc 
well-establis ... 
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Carl E. Landwehr, Constance L. Heitmeyer, John McLean 

August 1984 ACM Transactions on Computer Systems (TOCS), volume 2 issue 3 
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Full text available: 'M.pdfi.l ,I£„MB) Additional Information: fujl.citatipn J references, citings, indexjenro, review 
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November 1998 ACM Transactions on Information and System Security (TISSEC), volume l iss 

Publisher: ACM Press 

Full text available: *g) pdft 457.22 KB; Additional Information: fail citation , abstract , references , citings, index term 

We present an approach to control information flow in object-oriented systems. The decision of 
whether an information flow is permitted or denied depends on both the authorizations specifiec 
objects and the process by which information is obtained and transmitted. Depending on the sp 
computations, a process accessing sensitive information could still be allowed to release inform* 
users who are not allowed to directly access it. Exceptions to the permissions and restricti ... 

Keywords: access control, condifentiality, information flow control, object-oriented databases ; 
systems 
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Jonathan J. King 

October 1983 ACM SIGART Bulletin, issue 86 
Publisher: ACM Press 

Full text available: ^pdf(3J3£MB) Additional Information: Mcrtatjon, abstract. 

This collection of research summaries spans a very wide range of interests under the general he 
of AI and Database research. In this introduction, I briefly describe the leading areas of interest 
emerge from the reports submitted for this issue. 
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^SPf: July 1998 ACM SIGAda Ada Letters, volume xvm issue 4 

Publisher: ACM Press 

Full text available: '^.pdfiZ.Sa.MBJ Additional Information: MfiBatiao, abstract, sffiogs, Ladextex^s 

This paper is the current result of a study by the ISO HRG Rapporteur group which is being cira 
for comment. Many people have contributed to this, but those who have either attended two re< 
meetings of group or have made substantial e-mail comments are: Praful V Bhansali (Boeing, U 
Alan Burns (University of York, UK), Bernard Carre' (Praxis Critical Systems, UK), Dan Craigen ( 
Canada), Nick Johnson MoD, UK), Stephen Michel! (Canada), Gilles Motet (DGEI/IIMSA, France), 
Roma ... 
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J. Sairamesh, S. Goh, I. Stanoi, S. Padmanabhan, C. S. Li 
December 2004 Mobile Networks and Applications, volume 9 issue 6 

Publisher: Kluwer Academic Publishers 

Full text available: ^| pdf(625.36 KB) Additional Information: full citation, abstract, references, index terms 

With the tremendous advances in hand-held computing and communication capabilities, rapid 
proliferation of mobile devices, and decreasing device costs, we are seeing a growth in mobile e 
business in various consumer and business markets. In this paper, we present a novel architect 
framework for end-to-end mobile e-business applications (e.g., point of sales). The architecture 
into consideration disconnection, application context, synchronization, transactions and failure 
recovery ... 

Keywords: failure recovery, mobile commerce, mobile disconnection, mobile e-business, remo 
disconnection, seamless business transaction 
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Yin-he Jiang, Xiangning Liu, Bharat Bhargava 

November 1994 Proceedings of the third international conference on Information and know 

management 
Publisher: ACM Press 

Full text available: l g] pdf(741.19 KB) Additional Information: full citation, abstract, references , index terms 

Performance is a major issue in the acceptance of object-oriented database management syster 
(OODBMS). The nested index and path index schemes have been criticized for their heavy costs 
poor handling of update operations. This paper re-evaluates three index schemes (nested index 
index, and multi-index) applicable to queries on nested attributes. Among these, we found that 
multi-index scheme is best supported in the object-oriented or extended relational DBMS enviro 
Multi- ... 
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May 2002 Proceedings of the 11th international conference on World Wide Web 
Publisher: ACM Press 

Full text available: *gj pcjft'201.14 KB) Additional Information: full citation, abstract, references, citings, index term 

In this paper, we argue that cache consistency mechanisms designed for stand-alone proxies dc 
scale to the large number of proxies in a content distribution network and are not flexible enouc 
allow consistency guarantees to be tailored to object needs. To meet the twin challenges of seal 
and flexibility, we introduce the notion of cooperative consistency along with a mechanism, calk 
cooperative leases, to achieve it. By supporting &Dgr;-consistency semantics and by using ... 

Keywords: content distribution networks, data consistency, data dissemination, dynamic data, 
pullC, push, scalability, world wide web 
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